Cross Site Scripting (XSS) vulnerability in phpList 3.5.3 via the login name field in Manage Administrators when adding a new admin.
{ "severity": "Medium", "cpes": [ "cpe:2.3:a:phplist:phplist:*:*:*:*:*:*:*:*" ] }